Hack In The Box Security Conference Courses

Malware Protocol Simulations in Distributed Networks

Explore advanced malware protocol simulations for distributed networks, enhancing threat detection and defense strategies through realistic Command & Control traffic replication without using actual malware.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

Container Escape in 2021

Explore new methods for escaping privileged runc containers, focusing on cloud security vulnerabilities and innovative exploit techniques in container environments.

• YouTube
• 43 minutes
• On-Demand
• Conference Talk

Protective DNS - Why It Matters and Deploying It With No Cloud

Explore on-premise protective DNS using RPZ for network security without cloud reliance. Learn motives, methods, and implementation from internet pioneer Dr. Paul Vixie.

• YouTube
• 50 minutes
• On-Demand
• Conference Talk

Going Deeper Into Schneider Modicon PAC Security

Exploración profunda de vulnerabilidades en controladores Modicon PAC de Schneider, analizando protocolos de comunicación privados y mecanismos de protección por contraseña. Incluye demostraciones de ataques y recomendaciones defensivas.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

IDA2Obj - Static Binary Instrumentation on Steroids

Explore static binary instrumentation with IDA2Obj, a tool for dumping object files from executables. Learn implementation, challenges, and integration with fuzzing engines for efficient code coverage collection.

• YouTube
• 42 minutes
• On-Demand
• Conference Talk

Scaling Up Offensive Pipelines

Innovative approach to offensive CI/CD pipelines for red and purple team operations, automating weaponization and evasion techniques using Infrastructure as Code and Kubernetes.

• YouTube
• 1 hour 3 minutes
• On-Demand
• Conference Talk

Practical AI Red Teaming - A Facial Recognition Case Study

Practical insights into AI red teaming for facial recognition systems, exploring vulnerabilities, attack methods, and defense strategies in real-world environments.

• YouTube
• 49 minutes
• On-Demand
• Conference Talk

Taking Ghidra to the Next Level

Enhancing Ghidra: BinCraft's modernization efforts, improved decompilation, and integration of advanced techniques like GraalVM for a more powerful reverse engineering tool.

• YouTube
• 46 minutes
• On-Demand
• Conference Talk

What Modern RF Combat Looks Like in the Next Decade

Exploring the future of RF combat: IoT in defense, cyber-EW convergence, jamming, counter-drone solutions, and RF-focused case studies for next-gen battlefield technology and strategy.

• YouTube
• 1 hour 3 minutes
• On-Demand
• Conference Talk

Is Attestation All We Need? Fooling Apple's AppAttest API

Exploración detallada de la API AppAttest de Apple, sus vulnerabilidades y limitaciones como solución anti-manipulación, con ejemplos de implementaciones débiles y escenarios de bypass.

• YouTube
• 51 minutes
• On-Demand
• Conference Talk

Security Technology Arms Race 2021 - Medal Event

Explore the evolving security landscape, examining offensive and defensive strategies, technological breakthroughs, and future trends in cybersecurity. Gain insights into the ongoing arms race between attackers and defenders.

• YouTube
• 59 minutes
• On-Demand
• Conference Talk

HATS - Catch Up with Ero Carrera and Sergey Lozhkin

Insightful discussion with cybersecurity experts Ero Carrera and Sergey Lozhkin on advanced threat analysis, reverse engineering, and the role of AI/ML in cybersecurity at HITB2021AMS.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

JARM Randomizer - Evading JARM Fingerprinting

Explore JARM fingerprinting evasion techniques and a JARM randomizer proxy for C2 channels. Learn about challenges, future improvements, and strategies to avoid blocklists in TLS-based fingerprinting.

• YouTube
• 26 minutes
• On-Demand
• Conference Talk

AWS GuardDuty - Post-DNS Era Covert Channel For C&C

Exploring advanced covert communication techniques for malware, including DNS tunneling, cloud services exploitation, and AWS GuardDuty evasion. Discusses mitigation strategies and common security pitfalls.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk

5G Networks and Interconnect Threats

Explore 5G network interconnect security, focusing on roaming vulnerabilities, attack vectors, and protective measures. Learn about signaling firewalls and potential risks to user privacy.

• YouTube
• 28 minutes
• On-Demand
• Conference Talk